Scenario 9: Federated authentication: TotalAgility Azure with Azure ACS and other IdPs
The following diagram describes claims-based authentication where TotalAgility Azure uses federated security to authenticate with Azure ACS and othet identity providers.
|
The Client accesses TotalAgility. |
|
The Client selects an Identity Provider (IdP) such as Google Account. |
|
The Identity Provider authenticates the Client and returns the IdP token for the selected identity. |
|
The Identity Provider submits the IdP token to Azure ACS via the Client. |
|
Azure ACS validates the IdP token and creates an FP token. |
|
Azure ACS returns the FP token for TotalAgility. |
|
Azure ACS submits the FP token to TotalAgility via the Client. |
|
TotalAgility uses the token issued by STS and extracts the claims from the token. |